SparkReceipt doesn't have its own two-factor authentication (2FA or MFA) for logging in. There are no authenticator-app codes or SMS codes to set up. If you want a second factor on your login, sign in with Google or Apple: your login then goes through your Google or Apple account, and the 2-step verification you have turned on there protects it.
Ways to make your login safer
- Sign in with Google or Apple and turn on 2-step verification there. Google calls it 2-Step Verification, Apple calls it two-factor authentication for Apple Account. Your SparkReceipt login is as protected as that account.
- Use a long password. SparkReceipt passwords are at least 12 characters. A long passphrase is easier to remember and harder to guess than a short complicated password. See How to change the password?
- Sign everyone else out by changing your password. Changing your password ends every other active session, on every device. Do this if you think someone else has your password.
- Give each person their own login. Invite colleagues and your accountant as users instead of sharing one login, so you can remove someone's access without changing your own password. See Inviting new users / adding new seats.
You can see which login methods your account has in your Profile under Login methods.
How do I verify my email address?
When you sign up with an email address and a password, SparkReceipt sends you a verification link. Open it to verify your address.
If you didn't get it, or the link has expired:
- Open your Profile (from the user menu at the bottom of the left sidebar in the web app, or Profile in the mobile app's side menu).
- Under Login methods, the Email & Password row shows an Unverified badge while the address isn't verified. In the mobile app, Login methods opens its own page; tap the Email & Password row there.
- Choose Resend verification email. You'll see Verification email sent.
- Open the newest email and click the link.
The verification link works for 1 hour. If it has expired, request a new one. If the email doesn't arrive, check your spam folder.
Until you click the link, the mobile app also shows a reminder at the top of the side menu that your email address is unverified, with its own Resend email. link.
Why verify?
Verifying confirms that the address belongs to you, and it is what links your email login to a Google or Apple sign-in with the same address.
Verify your email before you start using Sign in with Google or Apple on an account you created with an email and password. Until the address is verified, SparkReceipt can't tell that the Google or Apple login belongs to the same person, so it won't join them. Depending on the account, you'll either see "An account already uses this email. Sign in with your email and password, then verify your email before using social sign-in.", or the Google or Apple sign-in starts a separate, empty account. In that second case the unverified email and password login stops working, so you can't sign back in to the original account with your password. If that happens, don't add documents to the new account, and contact support@sparkreceipt.com.
If you signed up with Google or Apple only, there's nothing to verify: Google or Apple has already confirmed the address.